CVE-2006-7117

CVE-2006-7117 affects Kubix 0.7 and earlier. The vulnerabilities are directory traversal flaws where an attacker can cause local file inclusion via ".." sequences in the theme cookie passed to index.php (handled by includes/head.php) and arbitrary file read via ".." in the file parameter of add_d...